@xemahq/contracts 0.1.0

package/dist/worker-runtime/lib/runtime-profile.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimeProfileContentSchema = exports.RuntimeNativePermissionPolicySchema = exports.RuntimeNativePermissionSchema = exports.NativePermissionDecisionSchema = exports.NativePermissionDecision = void 0;
+exports.createRuntimeProfileContent = createRuntimeProfileContent;
+exports.serializeRuntimeProfileContent = serializeRuntimeProfileContent;
+exports.computeRuntimeProfileContentHash = computeRuntimeProfileContentHash;
+exports.resolveRuntimeNativePermission = resolveRuntimeNativePermission;
+const zod_1 = require("zod");
+const content_address_1 = require("../../content-address");
+const schemas_1 = require("./schemas");
+const OPAQUE_REF_PATTERN = /^[^\s\p{Cc}]+$/u;
+const NativeToolRefSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(2_048)
+    .regex(OPAQUE_REF_PATTERN, 'native tool ref must be opaque and contain no whitespace or control characters');
+const RuntimeSettingValueSchema = zod_1.z.json();
+const RuntimeProfileSettingsSchema = zod_1.z.record(zod_1.z.string().min(1).max(256), RuntimeSettingValueSchema).readonly();
+var NativePermissionDecision;
+(function (NativePermissionDecision) {
+    NativePermissionDecision["Deny"] = "deny";
+    NativePermissionDecision["Ask"] = "ask";
+    NativePermissionDecision["Allow"] = "allow";
+})(NativePermissionDecision || (exports.NativePermissionDecision = NativePermissionDecision = {}));
+exports.NativePermissionDecisionSchema = zod_1.z.nativeEnum(NativePermissionDecision);
+exports.RuntimeNativePermissionSchema = zod_1.z
+    .object({
+    nativeToolRef: NativeToolRefSchema,
+    decision: exports.NativePermissionDecisionSchema,
+})
+    .strict();
+exports.RuntimeNativePermissionPolicySchema = zod_1.z
+    .object({
+    kind: zod_1.z.literal('deny-all-except'),
+    entries: zod_1.z.array(exports.RuntimeNativePermissionSchema).readonly(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    addStrictlySortedPermissionIssues(value.entries, context);
+});
+exports.RuntimeProfileContentSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    runtimeKind: schemas_1.workerRuntimeKindSchema,
+    nativePermissionPolicy: exports.RuntimeNativePermissionPolicySchema,
+    settings: RuntimeProfileSettingsSchema,
+})
+    .strict();
+function createRuntimeProfileContent(input) {
+    return deepFreezeRuntimeProfile(exports.RuntimeProfileContentSchema.parse(input));
+}
+function serializeRuntimeProfileContent(input) {
+    return (0, content_address_1.canonicalJsonStringify)(createRuntimeProfileContent(input));
+}
+async function computeRuntimeProfileContentHash(input) {
+    const bytes = new TextEncoder().encode((0, content_address_1.canonicalJsonStringify)({
+        contract: 'xema-runtime-profile-content-v1',
+        content: createRuntimeProfileContent(input),
+    }));
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', Uint8Array.from(bytes));
+    return [...new Uint8Array(digest)]
+        .map((byte) => byte.toString(16).padStart(2, '0'))
+        .join('');
+}
+function resolveRuntimeNativePermission(policy, nativeToolRef) {
+    const parsedPolicy = exports.RuntimeNativePermissionPolicySchema.parse(policy);
+    const parsedRef = NativeToolRefSchema.parse(nativeToolRef);
+    return (parsedPolicy.entries.find((entry) => entry.nativeToolRef === parsedRef)
+        ?.decision ?? NativePermissionDecision.Deny);
+}
+function addStrictlySortedPermissionIssues(entries, context) {
+    for (let index = 1; index < entries.length; index += 1) {
+        const previous = entries[index - 1];
+        const current = entries[index];
+        if (previous === undefined || current === undefined) {
+            continue;
+        }
+        if (current.nativeToolRef <= previous.nativeToolRef) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['entries', index, 'nativeToolRef'],
+                message: current.nativeToolRef === previous.nativeToolRef
+                    ? 'nativePermissionPolicy entries must not contain duplicate nativeToolRefs.'
+                    : 'nativePermissionPolicy entries must be sorted by nativeToolRef.',
+            });
+        }
+    }
+}
+function deepFreezeRuntimeProfile(value) {
+    if (value === null || typeof value !== 'object') {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        value.forEach((entry) => deepFreezeRuntimeProfile(entry));
+        return Object.freeze(value);
+    }
+    Object.values(value).forEach((entry) => deepFreezeRuntimeProfile(entry));
+    return Object.freeze(value);
+}
+//# sourceMappingURL=runtime-profile.js.map

package/dist/worker-runtime/lib/runtime-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-profile.js","sourceRoot":"","sources":["../../../src/worker-runtime/lib/runtime-profile.ts"],"names":[],"mappings":";;;AA6FA,kEAMC;AAGD,wEAEC;AAGD,4EAgBC;AAMD,wEAUC;AA3ID,6BAAwB;AAExB,2DAA+D;AAG/D,uCAAoD;AAEpD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,KAAK,CAAC;KACV,KAAK,CACJ,kBAAkB,EAClB,gFAAgF,CACjF,CAAC;AAEJ,MAAM,yBAAyB,GAAG,OAAC,CAAC,IAAI,EAAE,CAAC;AAI3C,MAAM,4BAA4B,GAE9B,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE/E,IAAY,wBAIX;AAJD,WAAY,wBAAwB;IAClC,yCAAa,CAAA;IACb,uCAAW,CAAA;IACX,2CAAe,CAAA;AACjB,CAAC,EAJW,wBAAwB,wCAAxB,wBAAwB,QAInC;AAEY,QAAA,8BAA8B,GAAG,OAAC,CAAC,UAAU,CACxD,wBAAwB,CACzB,CAAC;AAOW,QAAA,6BAA6B,GACxC,OAAC;KACE,MAAM,CAAC;IACN,aAAa,EAAE,mBAAmB;IAClC,QAAQ,EAAE,sCAA8B;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAOD,QAAA,mCAAmC,GAC9C,OAAC;KACE,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,qCAA6B,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,iCAAiC,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAoBM,QAAA,2BAA2B,GAAqC,OAAC;KAC3E,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,iCAAuB;IACpC,sBAAsB,EAAE,2CAAmC;IAC3D,QAAQ,EAAE,4BAA4B;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,SAAgB,2BAA2B,CACzC,KAAc;IAEd,OAAO,wBAAwB,CAC7B,mCAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAChB,CAAC;AAC7B,CAAC;AAGD,SAAgB,8BAA8B,CAAC,KAAc;IAC3D,OAAO,IAAA,wCAAsB,EAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAGM,KAAK,UAAU,gCAAgC,CACpD,KAAc;IAEd,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACpC,IAAA,wCAAsB,EAAC;QACrB,QAAQ,EAAE,iCAAiC;QAC3C,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC;KAC5C,CAAC,CACH,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAClD,SAAS,EACT,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CACvB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAMD,SAAgB,8BAA8B,CAC5C,MAAqC,EACrC,aAAqB;IAErB,MAAM,YAAY,GAAG,2CAAmC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC3D,OAAO,CACL,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;QACrE,EAAE,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,OAA2C,EAC3C,OAAwB;IAExB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC;gBACzC,OAAO,EACL,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;oBAC9C,CAAC,CAAC,2EAA2E;oBAC7E,CAAC,CAAC,iEAAiE;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/worker-runtime/lib/runtime.d.ts

@@ -0,0 +1,39 @@
+import type { ZodType } from 'zod';
+import type { AbstractMount } from '../../workspace-storage';
+import type { SchedulerCapabilityRequest, WorkerRuntimeCapabilityBits } from './capabilities';
+import type { WorkerRuntimeKind } from './enums';
+import type { RuntimeProfileContent, RuntimeSettingValue } from './runtime-profile';
+export interface BuildPodSpecInput {
+    readonly image: string;
+    readonly env: Readonly<Record<string, string>>;
+    readonly mounts: readonly AbstractMount[];
+    readonly region?: string;
+    readonly capabilities: readonly SchedulerCapabilityRequest[];
+}
+export interface BuildBundleInput {
+    readonly primaryAgent: string;
+    readonly subAgents: readonly string[];
+    readonly modelOverride?: string;
+    readonly runtimeConfigBase64?: string;
+}
+export interface SessionBundle {
+    readonly fingerprint: string;
+    readonly payloadBase64: string;
+}
+export type RuntimeProfileSchema = ZodType<RuntimeProfileContent>;
+export type RuntimeProfileProjection = Readonly<Record<string, RuntimeSettingValue>>;
+export type RuntimeProfileCompilationContext = Readonly<object>;
+export interface WorkerRuntimeAdapter {
+    readonly kind: WorkerRuntimeKind;
+    readonly capabilities: WorkerRuntimeCapabilityBits;
+    readonly connectorKindRequired: string;
+    runtimeProfileSchema(): RuntimeProfileSchema;
+    compileProfile(profile: RuntimeProfileContent, resolvedComposition: RuntimeProfileCompilationContext): RuntimeProfileProjection;
+    buildPodSpec(input: BuildPodSpecInput): Promise<unknown>;
+    buildSessionBundle(input: BuildBundleInput): Promise<SessionBundle>;
+    applySessionBundle(bundle: SessionBundle): Promise<void>;
+    pause(): Promise<void>;
+    resume(): Promise<void>;
+    readonly autoCommitHookSupported: boolean;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/dist/worker-runtime/lib/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/worker-runtime/lib/runtime.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,KAAK,EACV,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/C,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAE1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,YAAY,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC9D;AA4BD,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAQD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAOD,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAOlE,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAC7C,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CACpC,CAAC;AAYF,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;AAOhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IAMnD,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IAGvC,oBAAoB,IAAI,oBAAoB,CAAC;IAO7C,cAAc,CACZ,OAAO,EAAE,qBAAqB,EAC9B,mBAAmB,EAAE,gCAAgC,GACpD,wBAAwB,CAAC;IAG5B,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGzD,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAGpE,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGzD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAGvB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAMxB,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;CAC3C"}

package/dist/worker-runtime/lib/runtime.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=runtime.js.map

package/dist/worker-runtime/lib/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/worker-runtime/lib/runtime.ts"],"names":[],"mappings":""}

package/dist/worker-runtime/lib/schemas.d.ts

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+import { HookKind, WorkerRuntimeKind } from './enums';
+export declare const workerRuntimeKindSchema: z.ZodEnum<typeof WorkerRuntimeKind>;
+export declare const hookKindSchema: z.ZodEnum<typeof HookKind>;
+export declare const workerRuntimeCapabilityBitsSchema: z.ZodObject<{
+    hotMcp: z.ZodBoolean;
+    hotModelSwap: z.ZodBoolean;
+    sessionFork: z.ZodBoolean;
+    subAgentCrud: z.ZodBoolean;
+    hooks: z.ZodReadonly<z.ZodArray<z.ZodEnum<typeof HookKind>>>;
+    previewSupervisor: z.ZodBoolean;
+    gatewayAttributedCalls: z.ZodBoolean;
+    llmEndpointOverride: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const schedulerCapabilityBitsSchema: z.ZodObject<{
+    autoRestart: z.ZodBoolean;
+    healthCheck: z.ZodBoolean;
+    hpa: z.ZodBoolean;
+    networkPolicy: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const schedulerCapabilityRequestSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        autoRestart: "autoRestart";
+        healthCheck: "healthCheck";
+        hpa: "hpa";
+        networkPolicy: "networkPolicy";
+    }>;
+    optional: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const sessionBundleSchema: z.ZodObject<{
+    fingerprint: z.ZodString;
+    payloadBase64: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/worker-runtime/lib/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/worker-runtime/lib/schemas.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEtD,eAAO,MAAM,uBAAuB,qCAAkC,CAAC;AACvE,eAAO,MAAM,cAAc,4BAAyB,CAAC;AAErD,eAAO,MAAM,iCAAiC;;;;;;;;;iBAS5C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;iBAG3C,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAC"}

package/dist/worker-runtime/lib/schemas.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionBundleSchema = exports.schedulerCapabilityRequestSchema = exports.schedulerCapabilityBitsSchema = exports.workerRuntimeCapabilityBitsSchema = exports.hookKindSchema = exports.workerRuntimeKindSchema = void 0;
+const zod_1 = require("zod");
+const enums_1 = require("./enums");
+exports.workerRuntimeKindSchema = zod_1.z.nativeEnum(enums_1.WorkerRuntimeKind);
+exports.hookKindSchema = zod_1.z.nativeEnum(enums_1.HookKind);
+exports.workerRuntimeCapabilityBitsSchema = zod_1.z.object({
+    hotMcp: zod_1.z.boolean(),
+    hotModelSwap: zod_1.z.boolean(),
+    sessionFork: zod_1.z.boolean(),
+    subAgentCrud: zod_1.z.boolean(),
+    hooks: zod_1.z.array(exports.hookKindSchema).readonly(),
+    previewSupervisor: zod_1.z.boolean(),
+    gatewayAttributedCalls: zod_1.z.boolean(),
+    llmEndpointOverride: zod_1.z.boolean(),
+});
+exports.schedulerCapabilityBitsSchema = zod_1.z.object({
+    autoRestart: zod_1.z.boolean(),
+    healthCheck: zod_1.z.boolean(),
+    hpa: zod_1.z.boolean(),
+    networkPolicy: zod_1.z.boolean(),
+});
+exports.schedulerCapabilityRequestSchema = zod_1.z.object({
+    kind: zod_1.z.enum(['autoRestart', 'healthCheck', 'hpa', 'networkPolicy']),
+    optional: zod_1.z.boolean(),
+});
+exports.sessionBundleSchema = zod_1.z.object({
+    fingerprint: zod_1.z.string().min(1),
+    payloadBase64: zod_1.z.string().min(1),
+});
+//# sourceMappingURL=schemas.js.map

package/dist/worker-runtime/lib/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/worker-runtime/lib/schemas.ts"],"names":[],"mappings":";;;AASA,6BAAwB;AAExB,mCAAsD;AAEzC,QAAA,uBAAuB,GAAG,OAAC,CAAC,UAAU,CAAC,yBAAiB,CAAC,CAAC;AAC1D,QAAA,cAAc,GAAG,OAAC,CAAC,UAAU,CAAC,gBAAQ,CAAC,CAAC;AAExC,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE;IACnB,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE;IACzB,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;IACxB,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE;IACzB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,sBAAc,CAAC,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;IAC9B,sBAAsB,EAAE,OAAC,CAAC,OAAO,EAAE;IACnC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE;CACjC,CAAC,CAAC;AAEU,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;IACxB,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;IACxB,GAAG,EAAE,OAAC,CAAC,OAAO,EAAE;IAChB,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE;CAC3B,CAAC,CAAC;AAEU,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACpE,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC"}

package/dist/worker-runtime/lib/workspace-sandbox.d.ts

@@ -0,0 +1,7 @@
+import { type RuntimeLayoutProfile } from './runtime-layout-profile';
+export interface WorkspaceSandboxProtection {
+    readonly secretReadDenyGlobs: readonly string[];
+    readonly protectedEditDenyGlobs: readonly string[];
+}
+export declare function deriveWorkspaceSandboxProtection(profile: RuntimeLayoutProfile): WorkspaceSandboxProtection;
+//# sourceMappingURL=workspace-sandbox.d.ts.map

package/dist/worker-runtime/lib/workspace-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-sandbox.d.ts","sourceRoot":"","sources":["../../../src/worker-runtime/lib/workspace-sandbox.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAqCD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,oBAAoB,GAC5B,0BAA0B,CAqE5B"}

package/dist/worker-runtime/lib/workspace-sandbox.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveWorkspaceSandboxProtection = deriveWorkspaceSandboxProtection;
+const agent_workspace_1 = require("../../agent-workspace");
+const runtime_layout_profile_1 = require("./runtime-layout-profile");
+function dedupeStable(globs) {
+    return [...new Set(globs)];
+}
+function placementFor(profile, slot) {
+    const placement = profile.placements[slot];
+    if (placement === undefined) {
+        throw new Error(`RUNTIME_SANDBOX_PLACEMENT_MISSING:${profile.runtimeKind}:${slot}`);
+    }
+    return placement;
+}
+function requireFilePlacement(profile, slot) {
+    const placement = placementFor(profile, slot);
+    if (placement.kind !== runtime_layout_profile_1.RuntimeSlotPlacementKind.File) {
+        throw new Error(`RUNTIME_SANDBOX_FILE_PLACEMENT_REQUIRED:${profile.runtimeKind}:${slot}:${placement.kind}`);
+    }
+    return placement.path;
+}
+function deriveWorkspaceSandboxProtection(profile) {
+    const runtimeConfigFile = requireFilePlacement(profile, agent_workspace_1.LogicalWorkspaceSlot.RuntimeConfig);
+    const contextPlacement = placementFor(profile, agent_workspace_1.LogicalWorkspaceSlot.AgentContext);
+    if (contextPlacement.kind !== runtime_layout_profile_1.RuntimeSlotPlacementKind.AgentContextFiles) {
+        throw new Error(`RUNTIME_SANDBOX_CONTEXT_PLACEMENT_REQUIRED:${profile.runtimeKind}:${contextPlacement.kind}`);
+    }
+    const mcpPlacement = placementFor(profile, agent_workspace_1.LogicalWorkspaceSlot.McpConfig);
+    let separateMcpFile;
+    switch (mcpPlacement.kind) {
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.File:
+            separateMcpFile = mcpPlacement.path;
+            break;
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.RuntimeConfigSection:
+            if (mcpPlacement.configFile !== runtimeConfigFile) {
+                throw new Error(`RUNTIME_SANDBOX_MCP_CONFIG_MISMATCH:${profile.runtimeKind}:${mcpPlacement.configFile}`);
+            }
+            break;
+        default:
+            throw new Error(`RUNTIME_SANDBOX_MCP_PLACEMENT_INVALID:${profile.runtimeKind}:${mcpPlacement.kind}`);
+    }
+    const secretReadDenyGlobs = [runtimeConfigFile];
+    if (separateMcpFile !== undefined) {
+        secretReadDenyGlobs.push(separateMcpFile);
+    }
+    const protectedEditDenyGlobs = [
+        contextPlacement.projectContextFile,
+        contextPlacement.authorityContextFile,
+        runtimeConfigFile,
+        requireFilePlacement(profile, agent_workspace_1.LogicalWorkspaceSlot.SystemOverlay),
+    ];
+    if (separateMcpFile !== undefined) {
+        protectedEditDenyGlobs.push(separateMcpFile);
+    }
+    const agentDefinitions = placementFor(profile, agent_workspace_1.LogicalWorkspaceSlot.AgentDefinitions);
+    switch (agentDefinitions.kind) {
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.Directory:
+            protectedEditDenyGlobs.push(`${agentDefinitions.path}/**`);
+            break;
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.Unsupported:
+            break;
+        default:
+            throw new Error(`RUNTIME_SANDBOX_AGENT_DEFINITION_PLACEMENT_INVALID:${profile.runtimeKind}:${agentDefinitions.kind}`);
+    }
+    return {
+        secretReadDenyGlobs: dedupeStable(secretReadDenyGlobs),
+        protectedEditDenyGlobs: dedupeStable(protectedEditDenyGlobs),
+    };
+}
+//# sourceMappingURL=workspace-sandbox.js.map

package/dist/worker-runtime/lib/workspace-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-sandbox.js","sourceRoot":"","sources":["../../../src/worker-runtime/lib/workspace-sandbox.ts"],"names":[],"mappings":";;AAuDA,4EAuEC;AAtHD,2DAA6D;AAC7D,qEAIkC;AAOlC,SAAS,YAAY,CAAC,KAAwB;IAC5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CACnB,OAA6B,EAC7B,IAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,qCAAqC,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA6B,EAC7B,IAA0B;IAE1B,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,IAAI,KAAK,iDAAwB,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,WAAW,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC;AACxB,CAAC;AAOD,SAAgB,gCAAgC,CAC9C,OAA6B;IAE7B,MAAM,iBAAiB,GAAG,oBAAoB,CAC5C,OAAO,EACP,sCAAoB,CAAC,aAAa,CACnC,CAAC;IACF,MAAM,gBAAgB,GAAG,YAAY,CACnC,OAAO,EACP,sCAAoB,CAAC,YAAY,CAClC,CAAC;IACF,IAAI,gBAAgB,CAAC,IAAI,KAAK,iDAAwB,CAAC,iBAAiB,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,8CAA8C,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,sCAAoB,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,eAAmC,CAAC;IACxC,QAAQ,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,iDAAwB,CAAC,IAAI;YAChC,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC;YACpC,MAAM;QACR,KAAK,iDAAwB,CAAC,oBAAoB;YAChD,IAAI,YAAY,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,uCAAuC,OAAO,CAAC,WAAW,IAAI,YAAY,CAAC,UAAU,EAAE,CACxF,CAAC;YACJ,CAAC;YACD,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CACb,yCAAyC,OAAO,CAAC,WAAW,IAAI,YAAY,CAAC,IAAI,EAAE,CACpF,CAAC;IACN,CAAC;IAED,MAAM,mBAAmB,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,sBAAsB,GAAG;QAC7B,gBAAgB,CAAC,kBAAkB;QACnC,gBAAgB,CAAC,oBAAoB;QACrC,iBAAiB;QACjB,oBAAoB,CAAC,OAAO,EAAE,sCAAoB,CAAC,aAAa,CAAC;KAClE,CAAC;IACF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,gBAAgB,GAAG,YAAY,CACnC,OAAO,EACP,sCAAoB,CAAC,gBAAgB,CACtC,CAAC;IACF,QAAQ,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC9B,KAAK,iDAAwB,CAAC,SAAS;YACrC,sBAAsB,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC;YAC3D,MAAM;QACR,KAAK,iDAAwB,CAAC,WAAW;YACvC,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CACb,sDAAsD,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,IAAI,EAAE,CACrG,CAAC;IACN,CAAC;IAED,OAAO;QACL,mBAAmB,EAAE,YAAY,CAAC,mBAAmB,CAAC;QACtD,sBAAsB,EAAE,YAAY,CAAC,sBAAsB,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/worker-runtime/lib/workspace-slot-paths.d.ts

@@ -0,0 +1,13 @@
+import { LogicalWorkspaceSlot } from '../../agent-workspace';
+import { WorkerRuntimeKind } from './enums';
+export declare const AWP_SLOT_KEY_BY_LOGICAL_SLOT: Readonly<Record<LogicalWorkspaceSlot, string | null>>;
+export declare function workspacePaths(slot: LogicalWorkspaceSlot, runtimeKind: WorkerRuntimeKind): readonly string[];
+export declare function workspacePath(slot: LogicalWorkspaceSlot, runtimeKind: WorkerRuntimeKind): string;
+export interface WorkspacePathDivergence {
+    readonly slot: LogicalWorkspaceSlot;
+    readonly awpKey: string;
+    readonly awpPath: string | undefined;
+    readonly profilePath: string | undefined;
+}
+export declare function findWorkspacePathDivergences(runtimeKind: WorkerRuntimeKind): readonly WorkspacePathDivergence[];
+//# sourceMappingURL=workspace-slot-paths.d.ts.map

package/dist/worker-runtime/lib/workspace-slot-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-slot-paths.d.ts","sourceRoot":"","sources":["../../../src/worker-runtime/lib/workspace-slot-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAO1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAuE5C,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC,CAyC3C,CAAC;AAiBH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,oBAAoB,EAC1B,WAAW,EAAE,iBAAiB,GAC7B,SAAS,MAAM,EAAE,CAInB;AAgBD,wBAAgB,aAAa,CAC3B,IAAI,EAAE,oBAAoB,EAC1B,WAAW,EAAE,iBAAiB,GAC7B,MAAM,CAUR;AAiBD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAQD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,iBAAiB,GAC7B,SAAS,uBAAuB,EAAE,CA2CpC"}

package/dist/worker-runtime/lib/workspace-slot-paths.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWP_SLOT_KEY_BY_LOGICAL_SLOT = void 0;
+exports.workspacePaths = workspacePaths;
+exports.workspacePath = workspacePath;
+exports.findWorkspacePathDivergences = findWorkspacePathDivergences;
+const agent_workspace_1 = require("../../agent-workspace");
+const runtime_layout_profile_1 = require("./runtime-layout-profile");
+exports.AWP_SLOT_KEY_BY_LOGICAL_SLOT = Object.freeze({
+    [agent_workspace_1.LogicalWorkspaceSlot.Inputs]: 'inputs',
+    [agent_workspace_1.LogicalWorkspaceSlot.Temporary]: 'tmp',
+    [agent_workspace_1.LogicalWorkspaceSlot.Uploads]: 'uploads',
+    [agent_workspace_1.LogicalWorkspaceSlot.References]: 'references',
+    [agent_workspace_1.LogicalWorkspaceSlot.DeliverableSpecs]: 'deliverable-specs',
+    [agent_workspace_1.LogicalWorkspaceSlot.Deliverables]: 'deliverables',
+    [agent_workspace_1.LogicalWorkspaceSlot.Repositories]: 'repos',
+    [agent_workspace_1.LogicalWorkspaceSlot.SystemOverlay]: 'system-overlay',
+    [agent_workspace_1.LogicalWorkspaceSlot.AgentDefinitions]: 'agent-bundles',
+    [agent_workspace_1.LogicalWorkspaceSlot.SkillBundles]: 'skill-bundles',
+    [agent_workspace_1.LogicalWorkspaceSlot.SkillCommands]: 'commands',
+    [agent_workspace_1.LogicalWorkspaceSlot.AgentContext]: null,
+    [agent_workspace_1.LogicalWorkspaceSlot.RuntimeConfig]: null,
+    [agent_workspace_1.LogicalWorkspaceSlot.McpConfig]: null,
+    [agent_workspace_1.LogicalWorkspaceSlot.DesignSystemProjection]: null,
+});
+const AGENT_CONTEXT_AWP_KEYS = Object.freeze({
+    projectContextFile: 'agents-md',
+    authorityContextFile: 'context-json',
+});
+function workspacePaths(slot, runtimeKind) {
+    return placementPaths(runtime_layout_profile_1.RUNTIME_LAYOUT_PROFILES[runtimeKind].placements[slot]);
+}
+function workspacePath(slot, runtimeKind) {
+    const paths = workspacePaths(slot, runtimeKind);
+    const [only] = paths;
+    if (paths.length !== 1 || only === undefined) {
+        throw new Error(`Workspace slot "${slot}" occupies ${paths.length} path(s) under ` +
+            `runtime "${runtimeKind}", not exactly one. Use workspacePaths().`);
+    }
+    return only;
+}
+function placementPaths(placement) {
+    switch (placement.kind) {
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.Directory:
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.File:
+            return [placement.path];
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.AgentContextFiles:
+            return [placement.projectContextFile, placement.authorityContextFile];
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.RuntimeConfigSection:
+            return [placement.configFile];
+        case runtime_layout_profile_1.RuntimeSlotPlacementKind.Unsupported:
+            return [];
+    }
+}
+function findWorkspacePathDivergences(runtimeKind) {
+    const awpPathByKey = new Map(agent_workspace_1.AWP_V1_SPEC.slots.map((definition) => [definition.key, definition.path]));
+    const { placements } = runtime_layout_profile_1.RUNTIME_LAYOUT_PROFILES[runtimeKind];
+    const divergences = [];
+    for (const [slot, awpKey] of Object.entries(exports.AWP_SLOT_KEY_BY_LOGICAL_SLOT)) {
+        if (awpKey === null)
+            continue;
+        const [profilePath] = placementPaths(placements[slot]);
+        const awpPath = awpPathByKey.get(awpKey);
+        if (awpPath !== profilePath) {
+            divergences.push({ slot, awpKey, awpPath, profilePath });
+        }
+    }
+    const agentContext = placements[agent_workspace_1.LogicalWorkspaceSlot.AgentContext];
+    if (agentContext.kind === runtime_layout_profile_1.RuntimeSlotPlacementKind.AgentContextFiles) {
+        for (const [field, awpKey] of Object.entries(AGENT_CONTEXT_AWP_KEYS)) {
+            const profilePath = agentContext[field];
+            const awpPath = awpPathByKey.get(awpKey);
+            if (awpPath !== profilePath) {
+                divergences.push({
+                    slot: agent_workspace_1.LogicalWorkspaceSlot.AgentContext,
+                    awpKey,
+                    awpPath,
+                    profilePath,
+                });
+            }
+        }
+    }
+    return Object.freeze(divergences);
+}
+for (const runtimeKind of Object.keys(runtime_layout_profile_1.RUNTIME_LAYOUT_PROFILES)) {
+    const divergences = findWorkspacePathDivergences(runtimeKind);
+    if (divergences.length > 0) {
+        const detail = divergences
+            .map((d) => `  ${d.slot} (AWP "${d.awpKey}"): AWP says ${String(d.awpPath)}, ` +
+            `the ${runtimeKind} layout profile says ${String(d.profilePath)}`)
+            .join('\n');
+        throw new Error('AWP_V1_SPEC and the runtime layout profile disagree about where a ' +
+            `workspace slot lands:\n${detail}\n` +
+            'Both tables describe one filesystem. A slot whose two tables ' +
+            'disagree mounts bytes at one path and tells the agent about the ' +
+            'other, and nothing downstream compares them — the mount succeeds and ' +
+            'the agent globs an empty directory. Fix the table that is wrong, or ' +
+            'state the correspondence as `null` in AWP_SLOT_KEY_BY_LOGICAL_SLOT ' +
+            'with the reason.');
+    }
+}
+//# sourceMappingURL=workspace-slot-paths.js.map

package/dist/worker-runtime/lib/workspace-slot-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-slot-paths.js","sourceRoot":"","sources":["../../../src/worker-runtime/lib/workspace-slot-paths.ts"],"names":[],"mappings":";;;AAyIA,wCAOC;AAgBD,sCAaC;AA8BD,oEA6CC;AAxPD,2DAA0E;AAE1E,qEAIkC;AAwErB,QAAA,4BAA4B,GAErC,MAAM,CAAC,MAAM,CAAC;IAEhB,CAAC,sCAAoB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACvC,CAAC,sCAAoB,CAAC,SAAS,CAAC,EAAE,KAAK;IACvC,CAAC,sCAAoB,CAAC,OAAO,CAAC,EAAE,SAAS;IACzC,CAAC,sCAAoB,CAAC,UAAU,CAAC,EAAE,YAAY;IAC/C,CAAC,sCAAoB,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IAC5D,CAAC,sCAAoB,CAAC,YAAY,CAAC,EAAE,cAAc;IACnD,CAAC,sCAAoB,CAAC,YAAY,CAAC,EAAE,OAAO;IAC5C,CAAC,sCAAoB,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAQtD,CAAC,sCAAoB,CAAC,gBAAgB,CAAC,EAAE,eAAe;IACxD,CAAC,sCAAoB,CAAC,YAAY,CAAC,EAAE,eAAe;IACpD,CAAC,sCAAoB,CAAC,aAAa,CAAC,EAAE,UAAU;IAOhD,CAAC,sCAAoB,CAAC,YAAY,CAAC,EAAE,IAAI;IAMzC,CAAC,sCAAoB,CAAC,aAAa,CAAC,EAAE,IAAI;IAC1C,CAAC,sCAAoB,CAAC,SAAS,CAAC,EAAE,IAAI;IAMtC,CAAC,sCAAoB,CAAC,sBAAsB,CAAC,EAAE,IAAI;CACpD,CAAC,CAAC;AAGH,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,kBAAkB,EAAE,WAAW;IAC/B,oBAAoB,EAAE,cAAc;CACrC,CAAC,CAAC;AAWH,SAAgB,cAAc,CAC5B,IAA0B,EAC1B,WAA8B;IAE9B,OAAO,cAAc,CACnB,gDAAuB,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CACtD,CAAC;AACJ,CAAC;AAgBD,SAAgB,aAAa,CAC3B,IAA0B,EAC1B,WAA8B;IAE9B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,cAAc,KAAK,CAAC,MAAM,iBAAiB;YAChE,YAAY,WAAW,2CAA2C,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,SAA+B;IACrD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,iDAAwB,CAAC,SAAS,CAAC;QACxC,KAAK,iDAAwB,CAAC,IAAI;YAChC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,iDAAwB,CAAC,iBAAiB;YAC7C,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACxE,KAAK,iDAAwB,CAAC,oBAAoB;YAChD,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAChC,KAAK,iDAAwB,CAAC,WAAW;YACvC,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAgBD,SAAgB,4BAA4B,CAC1C,WAA8B;IAE9B,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,6BAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CACzE,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,GAAG,gDAAuB,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,WAAW,GAA8B,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oCAA4B,CAGrE,EAAE,CAAC;QACJ,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,CAAC,WAAW,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAMD,MAAM,YAAY,GAAG,UAAU,CAAC,sCAAoB,CAAC,YAAY,CAAC,CAAC;IACnE,IAAI,YAAY,CAAC,IAAI,KAAK,iDAAwB,CAAC,iBAAiB,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAGhE,EAAE,CAAC;YACJ,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,sCAAoB,CAAC,YAAY;oBACvC,MAAM;oBACN,OAAO;oBACP,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAUD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CACnC,gDAAuB,CACD,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW;aACvB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,MAAM,gBAAgB,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;YAClE,OAAO,WAAW,wBAAwB,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CACpE;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,oEAAoE;YAClE,0BAA0B,MAAM,IAAI;YACpC,+DAA+D;YAC/D,kEAAkE;YAClE,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,kBAAkB,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/workflow/index.d.ts

@@ -0,0 +1,28 @@
+export * from './lib/enums';
+export * from './lib/workflow-control';
+export * from './lib/workflow-namespace';
+export * from './lib/platform-task-queue';
+export * from './lib/errors';
+export * from './lib/snapshot-ref';
+export * from './lib/action-ref';
+export * from './lib/artifact-ref';
+export * from './lib/activity-outputs';
+export * from './lib/mount-plan';
+export * from './lib/agent-role';
+export * from './lib/role-capability';
+export * from './lib/concurrency-group';
+export * from './lib/trigger-payload';
+export * from './lib/compiled-run';
+export * from './lib/variable-requirement';
+export * from './lib/compiled-workspace-manifest';
+export * from './lib/workspace-manifest-enums';
+export * from './lib/model-ref';
+export * from './lib/job-run';
+export * from './lib/run-progress';
+export * from './lib/review-subject/index';
+export * from './lib/briefcase';
+export * from './lib/catalog-taxonomies';
+export * from './lib/domain-tag';
+export * from './lib/phase-report';
+export * from './lib/work-item-payloads';
+//# sourceMappingURL=index.d.ts.map

package/dist/workflow/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workflow/index.ts"],"names":[],"mappings":"AAUA,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAGhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AAIjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC"}

package/dist/workflow/index.js

@@ -0,0 +1,44 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/enums"), exports);
+__exportStar(require("./lib/workflow-control"), exports);
+__exportStar(require("./lib/workflow-namespace"), exports);
+__exportStar(require("./lib/platform-task-queue"), exports);
+__exportStar(require("./lib/errors"), exports);
+__exportStar(require("./lib/snapshot-ref"), exports);
+__exportStar(require("./lib/action-ref"), exports);
+__exportStar(require("./lib/artifact-ref"), exports);
+__exportStar(require("./lib/activity-outputs"), exports);
+__exportStar(require("./lib/mount-plan"), exports);
+__exportStar(require("./lib/agent-role"), exports);
+__exportStar(require("./lib/role-capability"), exports);
+__exportStar(require("./lib/concurrency-group"), exports);
+__exportStar(require("./lib/trigger-payload"), exports);
+__exportStar(require("./lib/compiled-run"), exports);
+__exportStar(require("./lib/variable-requirement"), exports);
+__exportStar(require("./lib/compiled-workspace-manifest"), exports);
+__exportStar(require("./lib/workspace-manifest-enums"), exports);
+__exportStar(require("./lib/model-ref"), exports);
+__exportStar(require("./lib/job-run"), exports);
+__exportStar(require("./lib/run-progress"), exports);
+__exportStar(require("./lib/review-subject/index"), exports);
+__exportStar(require("./lib/briefcase"), exports);
+__exportStar(require("./lib/catalog-taxonomies"), exports);
+__exportStar(require("./lib/domain-tag"), exports);
+__exportStar(require("./lib/phase-report"), exports);
+__exportStar(require("./lib/work-item-payloads"), exports);
+//# sourceMappingURL=index.js.map

package/dist/workflow/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workflow/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAUA,8CAA4B;AAC5B,yDAAuC;AACvC,2DAAyC;AACzC,4DAA0C;AAC1C,+CAA6B;AAC7B,qDAAmC;AACnC,mDAAiC;AACjC,qDAAmC;AACnC,yDAAuC;AACvC,mDAAiC;AACjC,mDAAiC;AACjC,wDAAsC;AACtC,0DAAwC;AACxC,wDAAsC;AACtC,qDAAmC;AACnC,6DAA2C;AAC3C,oEAAkD;AAClD,iEAA+C;AAC/C,kDAAgC;AAChC,gDAA8B;AAC9B,qDAAmC;AACnC,6DAA2C;AAC3C,kDAAgC;AAGhC,2DAAyC;AACzC,mDAAiC;AAIjC,qDAAmC;AACnC,2DAAyC"}

package/dist/workflow/lib/action-ref.d.ts

@@ -0,0 +1,12 @@
+import { ActionExecutionKind, ActionKind, TaskQueueName } from './enums';
+export interface ActionRef {
+    readonly id: string;
+    readonly version: string;
+    readonly manifestSha256: string;
+    readonly executionKind: ActionExecutionKind;
+    readonly taskQueue: TaskQueueName;
+    readonly actionKind: ActionKind;
+    readonly isReusableWorkflow: boolean;
+    readonly inputsSchema: Readonly<Record<string, unknown>> | null;
+}
+//# sourceMappingURL=action-ref.d.ts.map

package/dist/workflow/lib/action-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-ref.d.ts","sourceRoot":"","sources":["../../../src/workflow/lib/action-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAQzE,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAE5C,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IASlC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAEhC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAiBrC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;CACjE"}

package/dist/workflow/lib/action-ref.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=action-ref.js.map

package/dist/workflow/lib/action-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-ref.js","sourceRoot":"","sources":["../../../src/workflow/lib/action-ref.ts"],"names":[],"mappings":""}

package/dist/workflow/lib/activity-outputs.d.ts

@@ -0,0 +1,14 @@
+import type { ArtifactRef } from './artifact-ref';
+export type ActivityOutputsMap = Readonly<Record<string, ArtifactRef | readonly ArtifactRef[] | null>>;
+export interface ActivityEnvelope {
+    readonly outcome: string;
+    readonly durationMs: number;
+    readonly outputs: ActivityOutputsMap;
+}
+export interface ActivityOutputDeclaration {
+    readonly name: string;
+    readonly type: string;
+    readonly array?: boolean;
+}
+export type ActivityOutputDeclarations = Readonly<Record<string, ActivityOutputDeclaration>>;
+//# sourceMappingURL=activity-outputs.d.ts.map

package/dist/workflow/lib/activity-outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-outputs.d.ts","sourceRoot":"","sources":["../../../src/workflow/lib/activity-outputs.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAelD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CACvC,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,GAAG,IAAI,CAAC,CAC5D,CAAC;AAYF,MAAM,WAAW,gBAAgB;IAQ/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;CACtC;AAYD,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAaD,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAC/C,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAC1C,CAAC"}

package/dist/workflow/lib/activity-outputs.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=activity-outputs.js.map

package/dist/workflow/lib/activity-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-outputs.js","sourceRoot":"","sources":["../../../src/workflow/lib/activity-outputs.ts"],"names":[],"mappings":""}

package/dist/workflow/lib/agent-role.d.ts

@@ -0,0 +1,6 @@
+export declare const AGENT_RUN_ROLES: readonly ["unit-worker", "coordinator", "gate-reviewer", "clarification-coordinator", "scope-validator", "agent-session", "design-system-builder", "generic-agent", "auditor", "engineer", "studio-author", "webapp-studio", "document"];
+export type AgentRunRole = (typeof AGENT_RUN_ROLES)[number];
+export declare const AGENT_RUN_ROLES_INTERACTIVE: readonly ["agent-session", "design-system-builder", "studio-author", "webapp-studio", "document"];
+export declare const AGENT_RUN_ROLES_PIPELINE: readonly ["unit-worker", "coordinator", "gate-reviewer", "clarification-coordinator", "scope-validator", "generic-agent", "auditor", "engineer"];
+export declare function isAgentRunRole(value: unknown): value is AgentRunRole;
+//# sourceMappingURL=agent-role.d.ts.map

package/dist/workflow/lib/agent-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-role.d.ts","sourceRoot":"","sources":["../../../src/workflow/lib/agent-role.ts"],"names":[],"mappings":"AAsCA,eAAO,MAAM,eAAe,0OAkDlB,CAAC;AAQX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAS5D,eAAO,MAAM,2BAA2B,mGAMQ,CAAC;AAMjD,eAAO,MAAM,wBAAwB,kJASW,CAAC;AAKjD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAKpE"}